Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/9cStovZqZIguMy32iNwQxE_Mtx0.roa
File: 9cStovZqZIguMy32iNwQxE_Mtx0.roa (raw, json)
Hash identifier: Pod6k0a6+ae+F8Fd8Ios+FpAwr/45nbmMCJWWfqq6Kw=
Subject key identifier: F5:C4:AD:A2:F6:6A:64:88:2E:33:2D:F6:88:DC:10:C4:4F:CC:B7:1D
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0C2D38372092CB73BAE5293CA1C8A
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/9cStovZqZIguMy32iNwQxE_Mtx0.roa
Signing time: Mon 02 Jan 2023 05:25:04 +0000
ROA not before: Mon 02 Jan 2023 05:25:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205355
IP address blocks: 88.220.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:c2:d3:83:72:09:2c:b7:3b:ae:52:93:ca:1c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5c4ada2f66a64882e332df688dc10c44fccb71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ca:4c:0c:95:83:97:8b:09:6c:76:6f:d8:3a:
93:f5:d0:9d:12:dc:46:20:35:4e:d4:17:df:50:54:
fc:23:5e:f8:da:5a:4f:2f:73:6b:ce:cf:c8:e0:59:
f9:ca:25:7a:68:d9:00:ac:f5:9e:68:aa:72:cc:96:
b2:33:1f:3e:33:a2:e2:07:d8:81:eb:27:3e:cd:c6:
cb:e3:55:b9:09:19:cf:3e:fa:27:20:f5:60:fb:bb:
55:66:28:08:59:12:af:9d:42:fd:c2:50:fb:91:1a:
1d:50:f9:94:cd:1e:f5:cb:95:d8:8a:6c:14:b7:6b:
6c:cd:5e:ab:31:57:67:fe:38:1c:89:07:32:db:78:
22:3f:53:21:c2:74:1e:85:9a:62:6f:4c:01:7d:8d:
a6:03:9e:a3:8b:2e:14:c7:d7:7f:8d:0d:05:a1:f2:
d4:8a:1f:c8:62:82:e3:3f:9d:28:70:e8:ec:cb:8f:
10:73:d1:6e:c0:90:4b:03:51:07:0e:10:28:0b:c0:
c4:b8:f2:43:1b:4f:92:2c:86:bb:f1:74:63:aa:0d:
a4:64:87:4c:c8:dd:25:30:17:50:6c:2d:ea:72:45:
6e:a3:17:87:5e:a0:44:77:eb:11:55:fd:a6:72:c9:
b5:12:30:d3:cd:d5:97:a1:70:46:2a:6c:18:75:f5:
72:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C4:AD:A2:F6:6A:64:88:2E:33:2D:F6:88:DC:10:C4:4F:CC:B7:1D
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/9cStovZqZIguMy32iNwQxE_Mtx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.220.94.0/24
Signature Algorithm: sha256WithRSAEncryption
81:10:1e:59:c5:12:b6:6f:6d:76:13:5d:3b:c1:64:d3:36:cd:
73:54:64:1b:2f:91:5b:68:ae:9c:25:ee:ff:4e:4c:b7:aa:eb:
43:bd:cd:02:dd:fb:56:e9:27:ad:52:8d:93:db:03:08:08:df:
79:92:f6:ab:8b:ea:f5:4d:a1:85:94:e4:55:23:00:a1:e5:0f:
dc:d6:af:5c:76:5c:86:ae:1c:11:42:9f:7c:16:ee:57:66:3d:
93:b3:0b:27:05:0b:38:51:2b:ca:05:99:a1:8d:5f:91:db:7b:
c7:e1:3a:31:a8:a7:d6:1e:3c:6f:4f:3c:97:d1:e2:e7:50:fc:
04:fe:f4:61:b3:68:66:02:99:fb:75:19:60:f9:e7:bb:91:d8:
f0:a0:20:2c:0a:8a:5f:40:e3:0d:82:77:ea:91:ff:32:6b:1a:
01:97:e6:c6:f9:10:5b:35:c2:82:15:9f:fa:f4:3a:e7:a9:1b:
76:57:a5:35:fd:1f:53:30:a4:07:93:91:98:f5:11:bc:ae:49:
4a:2f:c3:48:63:f6:3b:66:0f:64:c3:b9:e3:2b:f2:e1:04:3f:
99:27:07:6f:73:a3:c0:dd:4a:8f:0c:e1:e6:99:ee:7f:ae:eb:
48:b6:e7:5a:32:29:82:ff:3c:8b:5d:30:35:39:d6:ec:bd:3b:
20:ed:91:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:36 2024 by rpki-client on console-fra.rpki-client.org